$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa File: c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa (raw, json) Hash identifier: zwdarEaeH6XWaScqxqHU2CqMv8ke8HM+EWoQEYAbhQ8= Subject key identifier: 70:3B:96:2E:8C:D5:07:3C:98:24:66:6C:1C:F6:57:C3:1A:F3:47:90 Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Certificate serial: 010D0C9F4328584D55BA483CA9BD48AA0AFBC580 Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa Signing time: Mon 30 Mar 2026 01:00:23 +0000 ROA not before: Mon 30 Mar 2026 01:00:23 +0000 ROA not after: Sun 28 Jun 2026 01:00:23 +0000 asID: 20253 IP address blocks: 2606:bc40:f100::/48 maxlen: 48 2606:bc40:f101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:55:ba:48:3c:a9:bd:48:aa:0a:fb:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07 Validity Not Before: Mar 30 01:00:23 2026 GMT Not After : Jun 28 01:00:23 2026 GMT Subject: CN=2a06dcc4-dc4e-4362-a913-b2834e48b047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e8:9a:53:d6:47:8e:02:4e:d9:73:c3:f4:72: 3c:53:e5:1d:ed:02:b7:67:ab:6b:a1:03:53:83:c3: 3e:85:85:08:09:b3:69:ed:0c:96:00:c9:49:3a:21: 3f:3a:9b:24:b6:d7:1e:20:dd:60:c7:ba:da:86:73: 5e:9e:74:b4:b8:52:52:4f:1c:3e:43:d0:7f:ac:1a: de:40:b4:27:8f:41:4e:73:5b:d9:d2:7d:05:06:6b: 64:09:4f:db:c6:9b:8b:5e:95:5a:26:f0:26:b4:d8: b0:f3:2f:4d:ec:15:5a:7e:7b:d9:b9:99:97:4b:d3: 29:97:50:8a:24:75:1d:71:23:6e:ea:bd:5e:6d:07: 55:c6:05:c8:06:0f:29:63:f4:71:f3:95:33:77:a7: ae:0f:c3:52:3e:fd:93:66:ef:0b:6b:a5:e9:89:70: b3:6e:32:d6:6d:bf:ce:a2:23:11:40:7f:1c:1f:81: fa:cf:85:fe:87:44:48:40:8c:53:b0:1f:64:04:9f: 39:90:14:a1:21:0a:20:3c:96:f5:8e:5e:65:0c:6a: 80:e5:12:b1:d3:10:dd:90:d0:33:e7:1a:68:0f:cf: 3f:c3:af:fd:be:79:3a:2b:d6:f3:37:04:3a:89:f6: 93:7d:0b:51:82:a0:67:44:31:e5:ab:1f:dc:26:de: 89:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3B:96:2E:8C:D5:07:3C:98:24:66:6C:1C:F6:57:C3:1A:F3:47:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/c2afe04d-8d73-3bef-b5c4-217ac12e7b79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl X509v3 Authority Key Identifier: keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer sbgp-ipAddrBlock: critical IPv6: 2606:bc40:f100::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:6c:4e:99:92:37:46:a4:5e:f6:de:4a:b4:fa:6f:b8:31:f5: 2d:3a:c1:96:f4:74:4f:44:70:12:35:99:4f:35:05:f8:61:72: b3:53:bf:b3:8a:af:b2:19:e4:2f:2b:09:ca:bf:fa:79:01:10: f6:3e:81:0f:2a:b1:ff:62:51:b8:68:fb:f3:54:1a:61:b1:f9: 5a:db:0c:04:2c:06:ec:6d:97:4a:e8:7a:c5:30:f9:c7:7e:0a: c3:7a:11:97:cc:a5:f2:6f:5e:cc:34:81:8a:87:d6:c7:d4:9a: bb:35:a7:69:73:95:3e:bb:fb:3f:51:80:76:16:27:e2:32:20: a1:26:7f:8c:b9:39:25:41:33:7b:54:49:03:53:1c:6d:6b:c6: 69:66:c0:7f:84:f6:e7:52:4f:7a:4f:a6:42:39:56:7a:3b:24: d9:2b:99:56:05:d7:96:f3:b0:3e:e7:e5:6c:5b:ae:51:24:5a: 65:d7:88:59:70:09:df:87:58:69:af:62:5d:56:a3:bc:d2:19: 15:9c:45:ae:97:f5:fe:ea:1b:d1:d5:95:05:38:dd:1c:db:97: b3:ec:78:c2:c1:01:19:a3:f7:81:a9:b5:97:ff:01:f4:eb:3d: cc:5c:20:87:aa:06:d5:92:d2:d6:84:f7:ed:b2:59:08:2f:02: c0:23:f0:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Vukg8qb1Iqgr7xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz YTA3MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk MmEwNmRjYzQtZGM0ZS00MzYyLWE5MTMtYjI4MzRlNDhiMDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeiaU9ZHjgJO2XPD9HI8U+Ud7QK3Z6troQNT g8M+hYUICbNp7QyWAMlJOiE/OpskttceIN1gx7rahnNennS0uFJSTxw+Q9B/rBre QLQnj0FOc1vZ0n0FBmtkCU/bxpuLXpVaJvAmtNiw8y9N7BVafnvZuZmXS9Mpl1CK JHUdcSNu6r1ebQdVxgXIBg8pY/Rx85Uzd6euD8NSPv2TZu8La6XpiXCzbjLWbb/O oiMRQH8cH4H6z4X+h0RIQIxTsB9kBJ85kBShIQogPJb1jl5lDGqA5RKx0xDdkNAz 5xpoD88/w6/9vnk6K9bzNwQ6ifaTfQtRgqBnRDHlqx/cJt6JCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHA7li6M1Qc8mCRmbBz2V8Ma80eQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvYzJhZmUwNGQtOGQ3My0z YmVmLWI1YzQtMjE3YWMxMmU3Yjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4 MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJga8QPEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABhsTpmSN0akXvbeSrT6b7gx9S06wZb0dE9EcBI1mU81BfhhcrNT v7OKr7IZ5C8rCcq/+nkBEPY+gQ8qsf9iUbho+/NUGmGx+VrbDAQsBuxtl0roesUw +cd+CsN6EZfMpfJvXsw0gYqH1sfUmrs1p2lzlT67+z9RgHYWJ+IyIKEmf4y5OSVB M3tUSQNTHG1rxmlmwH+E9udST3pPpkI5Vno7JNkrmVYF15bzsD7n5WxbrlEkWmXX iFlwCd+HWGmvYl1Wo7zSGRWcRa6X9f7qG9HVlQU43Rzbl7PseMLBARmj94GptZf/ AfTrPcxcIIeqBtWS0taE9+2yWQgvAsAj8Fg= -----END CERTIFICATE-----Generated at Fri Apr 17 16:32:45 2026 by rpki-client